GCVE - cpe:2.3:a:supsystic:photo_gallery:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:supsystic:photo_gallery:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Supsystic (`31a63952-7184-5307-ada0-8934fe420f61`)
Product	Photo Gallery (`e5ae8f0b-9b90-5210-937a-cd555e1a0547`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wp-plugins/gallery-by-supsystic`	purl2cpe	2026-06-01 10:15:31.956411

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-29921`	vulnerable	2026-06-03 14:55:27.666881	WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerability MEDIUM (5.9) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Photo Gallery by Supsystic gallery-by-supsystic.This issue affects Photo Gallery by Supsystic: from n/a through <= 1.15.16. Published: 2024-03-27T07:14:50.883Z Updated: 2026-05-11T20:57:35.809Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/gallery-by-supsystic/vulnerability/wordpress-photo-gallery-by-supsystic-plugin-1-15-16-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36891`	vulnerable	2026-06-03 14:44:59.330884	WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings. Published: 2022-06-15T19:16:58.016Z Updated: 2026-04-28T16:07:36.676Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/gallery-by-supsystic/#developers https://patchstack.com/database/vulnerability/gallery-by-supsystic/wordpress-photo-gallery-by-supsystic-plugin-1-15-5-cross-site-request-forgery-csrf-leading-to-plugin-settings-change	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10918`	vulnerable	2026-06-03 14:35:29.935899	Details available The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF. Published: 2019-08-22T12:23:13.000Z Updated: 2024-08-06T03:38:56.691Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/gallery-by-supsystic/#developers	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.